| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Added fieldMapping for the firewall access table (openvpn_accesses) | David Sommerseth | 2009-03-28 | 1 | -0/+15 | |
| | | ||||||
| * | Fixed a "hang" when wrong password was used | David Sommerseth | 2009-03-28 | 2 | -4/+8 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Due to the current implementation of SHA512 salts, it could be experienced as if the application hung on wrong passwords. This is because the rounds count for the passwords are scrambled, with values based on the given password. When a wrong password is given, this will also result in getting a wrong salt length and hash rounds for the following hash calculation. Due to this, the extracted rounds value from the salt string could return some really high number of rounds on wrong passwords (possibly the max value if integer). And this is why the "hang" is experienced. To avoid this, a check is added to make sure the rounds is not unreasonably much higher than the configured max rounds values. If the descrambled rounds number from the salt exceeds max rounds * 1.5, the password (most probaly) is wrong. In this case we do a sleep() to slow down bruteforce attacks and return NULL. The drawback is if the maxrounds later on is changed to a value which hits this scenario: passwordsalt_rounds > maxrounds_cfg * 1.5 In this case these old passwords will be invalidated by that configuration change. This is considered to be a feature and not a bug. The reason for mulitiplying by 1.5, is to allow a little room for a degrading the max rounds setting. By adjusting the max rounds up again, these passwords will be valid again. Added also a sleep() when wrong username is attempted. | |||||
| * | BUGFIX: Fixed missing string replace in certificate functions | David Sommerseth | 2009-03-27 | 1 | -2/+18 | |
| | | | | | | | | | When calling eDBadminGetCertificateInfo(...) or eDBadminDeleteCertificate(...) with a search XML document using common_name or organisation and these fields contained spaces, no certificates would be deleted. This is because space is replaced with underscore in the database. | |||||
| * | Made the licence explicit GPLv2 only | David Sommerseth | 2009-03-26 | 6 | -6/+6 | |
| | | ||||||
| * | Cleaned up the code a little bit | David Sommerseth | 2009-03-26 | 6 | -12/+16 | |
| | | | | | | Made sure we only include needed include files and checked that the copyright headers are equal and correct | |||||
| * | Corrected sorting of result in eDBadminGetAdminAccess(...) | David Sommerseth | 2009-03-24 | 1 | -1/+1 | |
| | | ||||||
| * | Implemented the eDBadminGetLastLog(...) function in the SQLite3 driver | David Sommerseth | 2009-03-24 | 2 | -3/+101 | |
| | | ||||||
| * | Extended the database driver with eDBadminGetAdminAccess(...) | David Sommerseth | 2009-03-24 | 1 | -0/+62 | |
| | | | | | | | This function will return an XML document with data extracted from the eurephia_adminaccess table. Search criterias are defined by the search XML doc given as input. | |||||
| * | Added support for editing the eurephia_adminaccess table | David Sommerseth | 2009-03-22 | 2 | -0/+73 | |
| | | | | | Implemented eDBadminEditAdminAccess(...) function in db driver | |||||
| * | Rewrote database driver (SQLite) to use eurephia_pwd_crypt(...) | David Sommerseth | 2009-03-22 | 2 | -20/+40 | |
| | | | | | Follow up from commit 062a3c92343a5fa371f8637f8bca88aacca14cc4 | |||||
| * | Added missing source in edb-sqlite driver after reorg with randstr.c | David Sommerseth | 2009-03-21 | 1 | -0/+1 | |
| | | ||||||
| * | Compile fix: Use sqlite_int64 instead of sqlite3_int64 | David Sommerseth | 2009-03-02 | 1 | -1/+1 | |
| | | | | | | This makes it possible to compile it on some older versions of the SQLite3 library | |||||
| * | Introduced password caching on authenticated sessions | David Sommerseth | 2009-01-03 | 1 | -19/+43 | |
| | | | | | | | | | | | | | | | | | | | | | | | This is to prepare eurephia-auth plugin to use other and more CPU intensive hashing algorithms for passwords. In addition, open sessions will now not be rejected/closed due to wrong password if the user changes the password with an open session running. The patch adds a new server_salt attribute in the eurephiaCTX structure. This is used as a temporary salt and is created of random data when OpenVPN is started. When a user is being authenticated (eurephia.c/eurephia_userauth) a authentication session (not the same as a 'normal' session) is opened and checked for a cached password. If it does not exist or match, normal password check will be done against the user database. If a cached password is found and matches, it is considered to be authenticated. The cached password uses the SHA512 algorithm, together with the eurephiaCTX->server_salt. | |||||
| * | Prepared passwdhash function to allow salting and be prepared for other ↵ | David Sommerseth | 2009-01-02 | 2 | -2/+2 | |
| | | | | | hashing algorithms | |||||
| * | Make it possible to compile plug-in again without eurephiadm enabled | David Sommerseth | 2009-01-02 | 1 | -2/+5 | |
| | | ||||||
| * | sqlite3 - compile in common/eurephia_xml.c when admin mode is enabledv0.9.3_beta | David Sommerseth | 2008-12-29 | 1 | -1/+1 | |
| | | ||||||
| * | Added db driver function: eDBadminGetUserCertsList(...) - to get user ↵ | David Sommerseth | 2008-12-28 | 1 | -0/+71 | |
| | | | | | account/certs links | |||||
| * | sqlite3: Make sqlite_query_mapped(...) work with empty WHERE clause | David Sommerseth | 2008-12-26 | 1 | -3/+10 | |
| | | ||||||
| * | sqlite3 - admin: Added DEBUG statements on all function calls | David Sommerseth | 2008-12-26 | 1 | -1/+18 | |
| | | ||||||
| * | sqlite3 db driver: Added eDBadminUpdateUserCertLink(...) function to add and ↵ | David Sommerseth | 2008-12-25 | 1 | -0/+48 | |
| | | | | | delete records in openvpn_usercerts | |||||
| * | Added field mapping for the openvpn_usercerts table | David Sommerseth | 2008-12-25 | 1 | -0/+9 | |
| | | ||||||
| * | Fixed spelling mistake in XML attribute for certificates | David Sommerseth | 2008-12-22 | 1 | -1/+1 | |
| | | ||||||
| * | sqlite3 - Return uid or certid of newly registered users or certificates | David Sommerseth | 2008-12-22 | 1 | -9/+12 | |
| | | ||||||
| * | sqlite3 - Added saving last_insert_id on INSERT INTO queries | David Sommerseth | 2008-12-22 | 3 | -1/+9 | |
| | | ||||||
| * | Moved all replace_char(...) calls into SQLite3 driver as xmlReplaceChars(...) | David Sommerseth | 2008-12-21 | 1 | -5/+37 | |
| | | ||||||
| * | sqlite3 - Added eDBadminGetCertificateInfo(...) | David Sommerseth | 2008-12-20 | 1 | -2/+92 | |
| | | ||||||
| * | sqlite3 - Added sortkeys as argument to sqlite_query_mapped(...) | David Sommerseth | 2008-12-20 | 3 | -8/+14 | |
| | | | | | | The last argument to the function can contain a list over field names which will be used in the ORDER BY clause when doing SELECT queries. | |||||
| * | Added eDBadminDeleteCertificate(...) function in SQLite3 driver | David Sommerseth | 2008-12-20 | 1 | -2/+52 | |
| | | ||||||
| * | sqlite3: Corrected some compiler warnings | David Sommerseth | 2008-12-20 | 1 | -2/+2 | |
| | | ||||||
| * | sqlite3: Added eDBadminAddCertificate(...) function | David Sommerseth | 2008-12-20 | 1 | -2/+51 | |
| | | ||||||
| * | Added field mapping for the certificates table | David Sommerseth | 2008-12-20 | 1 | -0/+11 | |
| | | ||||||
| * | Changed from numeric session status code to text in eDBadminGetUserInfo(...) ↵ | David Sommerseth | 2008-12-19 | 1 | -1/+2 | |
| | | | | | - lastlog | |||||
| * | sqlite - admin: Added fetching blacklist info for user account. | David Sommerseth | 2008-12-19 | 1 | -0/+24 | |
| | | ||||||
| * | sqlite - admin: Added fetching login attempt for user. Fixed a memory leak ↵ | David Sommerseth | 2008-12-19 | 1 | -4/+30 | |
| | | | | | and removed XML dump for debug | |||||
| * | Added extraction of lastlog info in eDBadminGetUserInfo(...) | David Sommerseth | 2008-12-19 | 1 | -43/+104 | |
| | | ||||||
| * | Fixed more memory leaks and missing memory initialisation. | David Sommerseth | 2008-12-19 | 1 | -2/+4 | |
| | | ||||||
| * | sqlite - BUGFIX: Fixed INSERT INTO statements when using ↵ | David Sommerseth | 2008-12-18 | 1 | -2/+8 | |
| | | | | | sqlite_query_mapped(...) | |||||
| * | sqlite: Fixed segfault int SQLreservedWord(...) | David Sommerseth | 2008-12-18 | 1 | -1/+1 | |
| | | ||||||
| * | Added SQLite3 admin functions for adding and deleting users | David Sommerseth | 2008-12-18 | 1 | -2/+90 | |
| | | ||||||
| * | Added more comments and some XML format documentation | David Sommerseth | 2008-12-18 | 1 | -4/+28 | |
| | | ||||||
| * | Removed all other eurephia admin structs which can be replaced by XML | David Sommerseth | 2008-12-18 | 1 | -6/+6 | |
| | | ||||||
| * | Removed everything which was connected to the eurephiaUSERINFO struct. | David Sommerseth | 2008-12-18 | 2 | -6/+4 | |
| | | ||||||
| * | Rewrote eDBadminUpdateUser(...) to use XML instead of eurephiaUSERINFO | David Sommerseth | 2008-12-18 | 1 | -13/+32 | |
| | | ||||||
| * | Updated eAdminGetUserInfo(...) work after commit | David Sommerseth | 2008-12-17 | 1 | -2/+4 | |
| | | | | | 31911812e53a8fda5ce8fa8e9d45254053a580c5 | |||||
| * | Using the new eurephiaXML_* functions for creating and parsing XML | David Sommerseth | 2008-12-17 | 1 | -6/+2 | |
| | | | | | | | | | | | | Also rebased the XML file to always have a document root which is <eurephia/>. This tag must contain a "format" attribute, which should be 1 for the moment. When parsing the XML, the eurephiaXML_getRoot(...) function will return a pointer to the requested XML node inside the <eurephia/> document root. The format version in the root element will also be checked automatically. | |||||
| * | Rewrote eDBadminGetUserList(...) to use XML | David Sommerseth | 2008-12-16 | 1 | -26/+18 | |
| | | ||||||
| * | Completed rewriting eDBadminGetUserInfo(...) function for XML | David Sommerseth | 2008-12-13 | 1 | -13/+12 | |
| | | | | | | This rewrite utilities the XML interface instead of the more static eurephiaUSERINFO struct. | |||||
| * | Moved libxml2 check from edb-sqlite to the global CMakeLists.txt | David Sommerseth | 2008-12-13 | 1 | -5/+0 | |
| | | ||||||
| * | Began porting eDBadminGetUserInfo(...) over to XML | David Sommerseth | 2008-12-13 | 1 | -50/+65 | |
| | | ||||||
| * | Added sqlite functions for populating an XML document directly | David Sommerseth | 2008-12-13 | 2 | -0/+27 | |
| | | ||||||
 |
index : eurephia.git | |
| Unnamed repository; edit this file to name it for gitweb. | David Sommerseth |
| summaryrefslogtreecommitdiffstats |